Lucene search
K

370 matches found

NVD
NVD
added 2026/05/21 9:16 a.m.7 views

CVE-2026-9157

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS0.00027EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 8:7 a.m.6 views

CVE-2026-9157

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS5.8AI score0.00027EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.4 views

PT-2026-42443

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS5.8AI score0.00027EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/14 5:48 p.m.3 views

EUVD-2025-209859

Improper Control of Generation of Code 'Code Injection' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22....

8.8CVSS5.8AI score0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/14 5:48 p.m.1 views

CVE-2025-15024

Improper Control of Generation of Code 'Code Injection' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22....

8.8CVSS5.8AI score0.00045EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/05/14 5:48 p.m.6 views

CVE-2025-15024

The CVE-2025-15024 entry concerns the Library Automation System from Yordam Information Technology (library management software). Affected versions are 19.5 up to but not including 22.1. The vulnerability is described as an improper control of code generation, i.e., a Code Injection issue that en...

8.8CVSS5.8AI score0.00045EPSS
Exploits0References1
NVD
NVD
added 2026/05/06 4:16 p.m.2 views

CVE-2026-6787

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/06 3:46 p.m.33 views

CVE-2026-6787 Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS0.00013EPSS
Exploits0References1
CVE
CVE
added 2026/05/06 3:46 p.m.5 views

CVE-2026-6787

The CVE-2026-6787 issue affects WatchGuard Agent on Windows prior to version 1.25.03.0000. It is a local, low-privilege vulnerability caused by a hard-coded cryptographic key that allows inclusion of code into an existing process, with high impact to confidentiality, integrity, and availability. ...

8.5CVSS5.8AI score0.00013EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/06 3:46 p.m.1 views

CVE-2026-6787

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS5.8AI score0.00013EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/06 3:46 p.m.3 views

CVE-2026-6787 Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS5.8AI score0.00013EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/23 3:38 p.m.1 views

EUVD-2026-25220

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS5.8AI score0.00022EPSS
Exploits1References2
NVD
NVD
added 2026/04/23 1:16 p.m.2 views

CVE-2026-39440

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS0.00022EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/23 12:11 p.m.31 views

CVE-2026-39440 WordPress FunnelFormsPro plugin <= 3.8.1 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS0.00022EPSS
Exploits1References1
CVE
CVE
added 2026/04/23 12:11 p.m.15 views

CVE-2026-39440

Summary: CVE-2026-39440 affects the WordPress plugin FunnelFormsPro (FunnelForms LLC) up to version 3.8.1. The issue is an improper control of code generation (code injection) that enables Remote Code Inclusion, effectively a Remote Code Execution vulnerability. The description indicates the affe...

9.9CVSS5.8AI score0.00022EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/23 12:0 a.m.2 views

PT-2026-34660

Name of the Vulnerable Software and Affected Versions FunnelFormsPro versions n/a through 3.8.1 Description Improper Control of Generation of Code allows Remote Code Inclusion, which enables an attacker to inject and execute arbitrary code. Recommendations At the moment, there is no information...

9.9CVSS6.1AI score0.00022EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2026/03/26 5:4 p.m.0 views

CVE-2026-25001

Improper Control of Generation of Code 'Code Injection' vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through = 4.0.12...

8.5CVSS5.8AI score0.00071EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 5:2 p.m.0 views

CVE-2026-27044

Improper Control of Generation of Code 'Code Injection' vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through = 4.12.0...

9.9CVSS5.8AI score0.00071EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:18 p.m.1 views

CVE-2026-32367

Improper Control of Generation of Code 'Code Injection' vulnerability in Yannick Lefebvre Modal Dialog modal-dialog allows Remote Code Inclusion.This issue affects Modal Dialog: from n/a through = 3.5.16...

9.1CVSS5.8AI score0.00065EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.1 views

CVE-2026-32414

Improper Control of Generation of Code 'Code Injection' vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Remote Code Inclusion.This issue affects Advanced Woo Labels: from n/a through = 2.36...

7.2CVSS5.8AI score0.00065EPSS
Exploits0References1
Rows per page
Query Builder